Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
real estate vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2007-0196
SQL injection vulnerability in admin_check_user.asp in Motionborg Web Real Estate 2.1 and previous versions allows remote malicious users to execute arbitrary SQL commands via the username field (txtUserName parameter) and possibly other parameters. NOTE: some details were obtain...
Motionborg Motionborg Web Real Estate
1 EDB exploit
7.5
CVSSv2
CVE-2006-6807
SQL injection vulnerability in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 and previous versions allows remote malicious users to execute arbitrary SQL commands via the agent parameter.
Softwebs Nepal Ananda Real Estate
2 EDB exploits
4.3
CVSSv2
CVE-2009-4318
Cross-site scripting (XSS) vulnerability in index.php in Real Estate Manager 1.0.1 allows remote malicious users to inject arbitrary web script or HTML via the lang parameter. NOTE: some of these details are obtained from third party information.
Realestatephp Real Estate Manager 1.0.1
7.5
CVSSv2
CVE-2009-4613
SQL injection vulnerability in realestate20/loginaction.php in NetArt Media Real Estate Portal 2.0 allows remote malicious users to execute arbitrary SQL commands via the Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...
Netartmedia Real Estate Portal 2.0
1 EDB exploit
7.5
CVSSv2
CVE-2010-4782
Multiple SQL injection vulnerabilities in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 allow remote malicious users to execute arbitrary SQL commands via the (1) city, (2) state, (3) country, (4) minprice, (5) maxprice, (6) bed, and (7) bath parameter...
Softwebsnepal Ananda Real Estate 3.4
2 EDB exploits
7.5
CVSSv2
CVE-2008-6798
Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote malicious users to execute arbitrary SQL commands via (1) the us parameter (aka the Username field) or (2) the ps parameter (aka the Password field).
Preprojects Pre Real Estate Listings
1 EDB exploit
7.5
CVSSv2
CVE-2008-4177
SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote malicious users to execute arbitrary SQL commands via the c parameter.
Preprojects Pre Real Estate Listings
1 EDB exploit
7.5
CVSSv2
CVE-2008-4497
SQL injection vulnerability in event_detail.php in Built2Go Real Estate Listings 1.5 allows remote malicious users to execute arbitrary SQL commands via the event_id parameter.
Built2go Real Estate Listings 1.5
1 EDB exploit
NA
CVE-2024-0543
A vulnerability classified as critical has been found in CodeAstro Real Estate Management System up to 1.0. This affects an unknown part of the file propertydetail.php. The manipulation of the argument pid leads to sql injection. It is possible to initiate the attack remotely. Th...
Codeastro Real Estate Management System
7.5
CVSSv2
CVE-2011-3394
SQL injection vulnerability in findagent.php in MYRE Real Estate Software allows remote malicious users to execute arbitrary SQL commands via the page parameter.
Myrephp Myre Real Estate Software
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-40673
CVE-2024-36674
CVE-2024-27348
unspecified
CVE-2024-24919
CVE-2024-4870
malicious code
CVE-2024-2019
hard-coded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
2
3
4
5
6
7
8
9
10
NEXT »